Record hashes of suspicious files

Brought to you by: jessekornblum

#1 Record hashes of suspicious files

Status: open

Owner: Jesse Kornblum

Labels: Program function (2)

Priority: 5

Updated: 2012-10-09

Created: 2008-02-20

Creator: Jesse Kornblum

Private: No

When running in default (detect mismatch extensions) mode, it might be good to compute MD5, SHA-1, or even fuzzy hashes. Maybe even a multihash with filesize?

C:> missidentify %SystemRoot%
C:\WINDOWS\System32\evilhaxortool.jpg

versus the new:

C:> missidentify -c md5 %SystemRoot%
f3abb86bd34cf4d52698f14c0da1dc60 C:\WINDOWS\System32\evilhaxortool.jpg

Discussion

Anonymous

Record hashes of suspicious files

Group

Searches

Help

#1 Record hashes of suspicious files

Discussion